PT-2023-34887 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.230 Description: The issue is related to the f2fs component, where a panic can be avoided if the extent tree is not created. The actual impact and attack plausibility have not yet been proven...

PT-2023-34860 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.165 Description: The issue is related to the f2fs component, where a panic can be avoided if the extent tree is not created. The actual impact and attack plausibility have not yet been proven...

PT-2023-34914 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.304 Description: The issue is related to the f2fs component, where a panic can be avoided if the extent tree is not created. The actual impact and attack plausibility have not yet been proven...

yaffshiv 路径遍历漏洞

yaffshiv is a simple YAFFS filesystem parser and extractor from the devttys0 personal developer. A security vulnerability exists in yaffshiv. An attacker can exploit this vulnerability to write arbitrary files outside of the extraction directory by crafting a malicious YAFFS file...

Timeswap Options has no reentry check and is providing a set of flashloan with no fees

Lines of code Vulnerability details high-flashloan-provider @timeswap Impact In the file /package/v2-option/TimeswapV2Option.sol, There are a range of functions that has no Reentry check. As a consequence, when the contract call back msg.sender, an attacker can then reeentry in his own callee...

PT-2023-10019 · Unknown · Flash Tool

Name of the Vulnerable Software and Affected Versions: flash tool gem versions prior to 0.6.0 Description: The issue allows command execution via shell metacharacters in the name of a downloaded file. It is triggered during the handling of downloaded files that contain shell characters, enabling ...

CVE-2021-26346

A flaw was found in hw. Failure to validate the integer operand in ASP AMD Secure Processor bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash, resulting in a potential denial of service. Mitigation Please contact AMD for more updates on this...

PT-2025-49656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s f2fs file system related to information disclosure. Specifically, when converting an inline directory to a regular directory, the f2fs move inline...

Redemptions during undercollateralization can be hot-swapped to steal all funds

Lines of code Vulnerability details Impact During recollateralization/a switch basket/when the protocol collateral isn't sound, a user can have almost their entire redemption transaction hot swapped for nothing. For example, trying to redeem 1M collateral for 1M rTokens could have the user end up...

GSD-2023-1001628 mtd: maps: pxa2xx-flash: fix memory leak in probe

mtd: maps: pxa2xx-flash: fix memory leak in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001161 mtd: maps: pxa2xx-flash: fix memory leak in probe

mtd: maps: pxa2xx-flash: fix memory leak in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000763 mtd: maps: pxa2xx-flash: fix memory leak in probe

mtd: maps: pxa2xx-flash: fix memory leak in probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

CVE-2022-45440

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17ABPC.3C0, which processes symbolic links on external storage media. A local authenticated attacker with administrator privileges could abuse this vulnerability to access the root file system by creating a...

PT-2023-34238

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to a memory leak in the probe function of the pxa2xx-flash driver. This problem was introduced in version v2.6.24 and is fixed in version v5.15.86. The actual impact and...

PT-2023-34541

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.24 through 5.10.162 Description A memory leak issue was discovered in the pxa2xx-flash component of the Linux Kernel. The issue was introduced in version 2.6.24 and fixed in version 5.10.163. The actual impact and...

PT-2023-33840

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a memory leak in the probe function of the pxa2xx-flash driver. This memory leak was introduced in version v2.6.24 and is fixed in version v6.0.16. The actual impact an...

PT-2023-34705

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description The issue is related to a memory leak in the probe function of the pxa2xx-flash module in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

CVE-2022-45440

The Zyxel AX7501-B0 router is vulnerable in firmware versions prior to V5.17(ABPC.3)C0 due to a flaw in the FTP server 's handling of symbolic links on external storage media. A local authenticated attacker with administrator privileges can exploit this by creating a symbolic link on an external ...

CVE-2022-42285

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...

CVE-2022-42285

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...